What Is Claimed Is; 



1 . A method to facilitate software installation using embedded user 
credentials, comprising: 

receiving a software installation package at a computer; 
extracting an installation program from the software installation package; 
determining if a current user has sufficient privileges to run the installation 
program; 

if the current user does not have sufficient privileges, 

recovering a set of user credentials that is associated with 
sufficient privileges to run the installation program from the 
software installation package, and 

authenticating to the computer using the set of user 
credentials; and 
running the installation program on the computer. 

2. The method of claim 1, wherein the software installation package 
includes an agent, wherein the agent enforces security policies on the computer. 

3. The method of claim 1 , wherein the software installation package 
includes a plurality of sets of user credentials. 

4. The method of claim 3, fiirther comprising: 

recovering a second set of user credentials from the plurality of sets of user 
credentials if the set of user credentials failed during authentication; and 

authenticating to the computer using the second set of user credentials. 
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5. The method of claim 1, wherein the set of user credentials is 
encrypted. 

6. The method of claim 1 , wherein the software installation package 
is received over a network. 

7. The method of claun 1 , wherein the software installation package 
is received on a storage medium. 

8. A computer-readable storage medium storing instructions that 
when executed by a computer cause the computer to perform a method to 
facilitate software installation using embedded user credentials, the method 
comprising: 

receiving a software installation package at the computer; 
extracting an installation program from the software installation package; 
determining if a current user has sufficient privileges to run the installation 
program; 

if the current user does not have sufficient privileges, 

recovering a set of user credentials that is associated with 
sufficient privileges to run the installation program from the 
software installation package, and 

authenticating to the computer using the set of user 
credentials; and 
running the installation program on the computer. 



10 

Attorney Docket No. NAO 1 -2050 1 Inventors: Kadam, et al. 

EJG C \MY DOCUMENTS\NETWORJK ASSOCIATES\NA01 -2050 1\NA0 1-20501 APPLICATION DOC 



9. The computer-readable storage medium of claim 8, wherein the 
software installation package includes an agent, wherein the agent enforces 
security policies on the computer. 

1 0. The computer-readable storage medium of claim 8, wherein the 
software installation package includes a plurality of sets of user credentials. 

1 1 . The computer-readable storage medium of claim 10, the method 
further comprising: 

recovering a second set of user credentials from the plurality of sets of user 
credentials if the set of user credentials failed during authentication; and 

authenticating to the computer using the second set of user credentials. 

12. The computer-readable storage medium of claim 8, wherein the set 
of user credentials is encrypted. 

1 3 . The computer-readable storage medium of claim 8, wherein the 
software installation package is received over a network. 

14. The computer-readable storage medium of claim 8, wherein the 
software installation package is received on a storage medium. 

15. An apparatus to facilitate software installation using embedded 
user credentials, comprising: 

a receiving mechanism that is configured to receive a software installation 
package at a computer; 
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an extracting mechanism that is configured to extract an installation 
program from the software installation package; 

a determining mechanism that is configured to determine if a current user 
has sufficient privileges to run the installation program; 

a recovering mechanism that is configured to recover a set of user 
credentials that is associated with sufficient privileges to run the installation 
program from the software installation package; 

an authenticating mechanism that is configured to authenticate to the 
computer using the set of user credentials; and 

a software executing mechanism that is configured to run the installation 
program on the computer. 

1 6. The apparatus of claim 15, wherein the software installation 
package includes an agent, wherein the agent enforces security policies on the 
computer. 

1 7. The apparatus of claim 1 5, wherein the software installation 
package includes a plvirality of sets of user credentials. 

18. The apparatus of claim 1 7, 

wherein the recovering mechanism is further configured to recover a 
second set of user credentials from the plurality of sets of user credentials if the 
set of user credentials failed during authentication; and 

wherein the authenticating mechanism is further configured to authenticate 
to the computer using the second set of user credentials. 
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1 9. The apparatus of claim 1 5, wherein the set of user credentials 
encrypted. 

20. The apparatus of claim 15, wherein the software installation 
package is received over a network. 

2 1 . The apparatus of claim 1 5, wherein the software installation 
package is received on a storage medium. 
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